Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

Is it ok to give out IP address to web developer [duplicate]

I’m currently working with web developer and he ask for IP address. Is it ok for me to send or is he trying to give me a virus or something
0
votes
1answer
64 views

Malware installed by grabify link?

I recently clicked on a grabify link and I think it might have installed a virus as well? The link was to a soundcloud page. I put the link into this website https://sitecheck.sucuri.net/ and it said ...
0
votes
1answer
72 views

I clicked on a grabify link. What can someone do with my IP? [duplicate]

I clicked on a link in discord not knowing it was a grabify link. I understand that an IP only gives your general location but what else can someone do with my IP? Can they find a way to access my ...
1
vote
0answers
31 views

watch-video.net malware and preventing these types of infections at the network level [closed]

How does a computer get infected with watch-video.net malware, and why aren't popular tools like windows defender or malwarebytes able to detect and remove it? Is there a practical way to prevent ...
2
votes
1answer
1k views

How to replace certain backup files on a website every 30 minutes? [closed]

I have a website built with WordPress, unfortunately somebody hacked it several times, deleted my adsense code and put his own adsense. I tried many security techniques, changed database name, did ...
1
vote
0answers
57 views

Do modern video game consoles sandbox games? [closed]

If for example there is a game, that is specifically designed to try to get control of your game console or to be able to provide the user of the game control over their system and somehow got onto ...
1
vote
1answer
83 views

Are emulators isolated from the host for malware testing?

I know that virtualization is different from emulation; I was wondering if emulation is isolated from its host and any destruction on it will not affect the host as if it were a virtual machine. I ...
0
votes
0answers
39 views

Wondering if a USB dongle for gaming controller could have malware installed [duplicate]

I purchased a usb gaming controller used. It has a usb dongle that plugs into the PC and a I assume its bluetooth. Is it possible for the USB dongle to contain a keylogger that starts up when I plug ...
0
votes
0answers
12 views

Unknown caller of a deleted exe file [migrated]

I uninstalled qbitTorrent 4.3.3 and deleted the exe from startup folder. Now every few minutes I get a windows alert saying: Windows cannot find 'C:\Users\Name\AppData\Roaming\Microsoft Windows\Start ...
1
vote
2answers
115 views

Embedding malicious code into an exe

How does malware usually embed into / infect exe files? (As in actually modifying the file on disk, not in memory). I've read it may look for gaps in the code section, insert its code, then redirect ...
0
votes
1answer
75 views

Can a text file disguised as .xlsm be malicious?

A hour ago we receive a suspicious mail targeting some of our mailing lists. It contains a .zip file, itself containing a .xlsm file. This .xlsm file appears to be recognized as an ASCII text file ...
0
votes
1answer
52 views

Infecting peers downloading files using BitTorrent protocols

I have read about BitTorrent protocols and how uTorrent works specifically. The main idea is that instead of many clients accessing the same server for downloading a file, different parts of the file ...
1
vote
1answer
89 views

Is it possible for a javascript malware to put keylogger extension in my browser? [duplicate]

I clicked on "It's like you" virus in Facebook Messenger. Then I archived the original link with archive.ph (archive.today), and during the process the site showed me this: https://pastebin....
2
votes
3answers
163 views

How does the government install a trojan horse on somebody's mobile phone?

I am reading a news article (in italian) in which the police snooped on the Dean of a university by a trojan horse that the police had installed on his mobile phone. In particular, the trojan horse ...
-2
votes
1answer
82 views

Unathorized Access to Google Drive

My Google Account was hacked granting unauthorized access to YouTube and Google Drive. The third party immediately started posting inappropriate content on YT which prompted an email from Google after ...
1
vote
1answer
88 views

If a file has previously been scanned by VirusTotal, will the VirusTotal website always indicate this fact?

I recently downloaded a very popular open-source application. Usually, I compile open-source applications myself after reading the source code. But my compiler box was busy with many tasks, so I ...
0
votes
0answers
54 views

How to read output of a Reflective DLL?

Reflective DLL Injection is one of the most interesting and best techniques to run custom code in memory. I've been learning about it a lot, I've learned how to pass in inputs, But I can't figure out ...
1
vote
0answers
116 views

Is this javascript code malicious? [closed]

a friend visited this site: h-t-t-p-s://adidastore.buzz/adidass/tb.php?_t=1614958342 I malformed the url so no one accidently clicks on it Below is the code the site is serving. I don't know ...
2
votes
4answers
213 views

Can a antivirus software detect a malware that steals data?

For example, consider a software that wants to package all txt files in the /user/Desktop directory and upload them to its own server. I am not a programmer, but I know it can be done very easily with ...
1
vote
1answer
111 views

Is it possible to get malware from .txt files? [duplicate]

I want to know is it possible to get malware from .txt files? I think it's possible, because a program executes the .txt file and program may get infected. If it is, how?
1
vote
0answers
57 views

I searched “Amazon.com” in Opera quicksearch and it led me to a strange page [closed]

I searched "amazon.com" in Opera quicksearch and it led me to this site: http://iyfnzgb.com/?pid=9PO1H9V71&dn=amanzon.com Is it malicious? Opera didn't open a proper internet page, only ...
1
vote
2answers
95 views

Can scripts execute virus on its own if we only open it in an IDE or Notepad?

If you download scripts such as file with extension such as .py, .java, .cs, .cpp, etc and if you don't run it but only open it in an IDE or notepad then will the virus get executed or is this ...
3
votes
0answers
52 views

How do malware analysts know when malware is state-sponsored? [duplicate]

When reading malware-analysis posts, I see researchers talking about sophisticated state-sponsored actors. How can researchers know when something is state-sponsored from their code/C2 servers alone?
0
votes
0answers
17 views

Unknown user directory on Windows with funky file names [duplicate]

Poking around my machine today, realised there's an unknown user listed in there: tVA2uiJ14w First I thought it could be some IT account, but then again the filenames are too funky to be business ...
0
votes
3answers
107 views

Can Android spyware like Pegasus survive flashing of a new ROM?

I live in a country that is not fully authoritarian but is increasingly illiberal. State agencies have been caught misusing spyware to target activists and dissidents on multiple occasions. Given ...
2
votes
1answer
88 views

Found a backdoor and multiple trojans in a computer. Is the hacker doing everything manually? [closed]

So I found a backdoor, multiple trojans and crypto miners in a client's PC. He is worried that his personal information has been compromised. What happened: During the installation of Kaspersky anti-...
1
vote
0answers
32 views

Exploitation of Resource Packages in Java

I understand this might be a usual question but I thought it'd be interesting to get people's feedback regardless as this relates to security. In games, in particular I am thinking about Minecraft, ...
0
votes
2answers
122 views

How do servers protect against straight up sending a HTTP request that is actually some malware or HTML code? [closed]

I know servers have something to block you from just sending them an HTTP request that is actually some malware or a webpage that is malicious, because it would be so easy to just spam HTTP requests ...
1
vote
2answers
114 views

Can I be sure a Word document is safe if it doesn't have macros

I am aware that MS Word documents can be potentially dangerous due to the executable macros contained within them. But for a particular document, I have opened the macros and can see there are none. ...
39
votes
4answers
14k views

If malware does not run in a VM why not make everything a VM?

There is a lot of malware that can detect whether it is running inside a VM or sandboxed environment and if such environment is detected it can conceal it self and not execute. So why not make ...
3
votes
2answers
654 views

How to protect from dependency confusion attacks?

I recently came across following article https://www.bleepingcomputer.com/news/security/researcher-hacks-over-35-tech-firms-in-novel-supply-chain-attack/ it describe about an exploit which exploit ...
0
votes
1answer
62 views

How secure is Heads for detecting tampering or infection of firmware or boot sector? (Pureboot)

I'm thinking of getting a Librem laptop with Pureboot which uses Heads (with the Librem key) for tamper detection. But I've heard rumours that there are weaknesses or vulnerabilities so I wanted to ...
1
vote
1answer
94 views

How does malware avoid AV's when using a simple DLL injection technique?

As far as I understand it, a simple approach for a malware DLL injection would require 2 DLLs. The first for the DLL side loading, while the malicious DLL remains encrypted. And then this 'loader' ...
1
vote
0answers
71 views

Virustotal alerts for Surfshark VPN [closed]

Virustotal is giving some alerts for the Windows installation of Surfshark VPN. I am sure they are false positives, I just wanted to hear what other users say about this...
16
votes
1answer
5k views

Norton detects intrusion attempt from virtual machine - how is this possible?

Sometimes I have to fix an infected WordPress website. I always check the infected website from a virtual machine (Oracle VM VirtualBox). I'm also running Norton 360 DeluXe on the host machine. In the ...
4
votes
2answers
113 views

Wireshark - How to monitor TLS traffic from a malware? (It does not write into the SSLKEYLOGFILE)

I recently found malware that uses TLS 1.2 to communicate with the c2 server. I wanted to check the content of that but is encrypted. I have tried the method with the SSLKEYLOGFILE but unlike for ...
0
votes
0answers
67 views

I suspect that my mac laptop is infected with malware that can view all my activity. What should I do?

Is it sufficient to reformat with a new osx install. If so, can the malware persist in cloud syncing programs like adobe creative cloud, icloud, onedrive and google drive?
1
vote
0answers
17 views

Can I safely view a malicious PDF in gmail or dochub? [duplicate]

I receive pdfs that could be malicious. Is it safe to view them within Gmail? What about DocHub? Is that the same as 'opening' them? (FYI I use Firefox as a browser)
2
votes
1answer
102 views

Wayback machine downloading a file called default.exe?

When I look up a site on wayback machine, I click through a couple of links on the site, and then instead of loading the page, it downloads a file called "default.exe". Since I was expecting ...
1
vote
0answers
54 views

Intercept HTTP requests for invalid domains in Linux

I am using Ubuntu 18.04. When making a HTTP request to invalid domains, I get a HTML page with javascript code that redirects me to uniregistry a landing page. More specifically, when trying to load ...
0
votes
2answers
73 views

Is there any way to validate the firmware in a USB flash drive?

I bought a pair of USB flash drives made by Huawei and I want to know if there are any tools in existence for verifying that the firmware on these drives is secure. I bought them for researching this ...
0
votes
0answers
70 views

How to protect a vulnerable Family Member?

I apologize if this isn't the best exchange to be asking in, but I'm a little new at this. Problem: A close relation outside my local area with declining cognitive function is demonstrating ...
1
vote
1answer
133 views

Can a malware steals my Facebook c_user, xs, and datr Cookies?

Just as the title suggests. I have a PasswordStealer on my PC and I'm afraid that it can do that. AFAIK, that malware can record keystrokes and steal saved passwords which I don't mind because I don't ...
2
votes
1answer
123 views

Can a driver(malware) hide it self from device manager?

For security reasons, I have this question in mind. I am not a security professional, so I want to ask: Let's suppose my computer's firmware is hacked. If I disable the wifi driver on windows, can a ...
0
votes
0answers
76 views

How to determine if a PC is safe after receiving a suspicious email message

I was checking my gmail account spam folder and I noticed an email sent by a known sender. I thought it was flagged as spam by mistake so I opened it. Then I realized the content is the same as ...
0
votes
1answer
66 views

How to remove IGAL ransomware [duplicate]

The IGAL ransomware is a malicious program that encrypts the personal documents found on the victim’s computer with the “.igal” extension, then displays a message which offers to decrypt the data if ...
0
votes
1answer
74 views

How I can read and handle MS Office documents, such as doc/ppt files, securely?

I've heard of too many horror stories of people opening a seemingly innocent docx or pptx file that they've got from a business partner, only to find out that it had embedded malware inside. What ...
1
vote
1answer
53 views

Cannot interpret maldet results

After executing sudo maldet -a / LMD provides the following report: HOST: foo.bar.baz SCAN ID: 210117-2223.1145531 STARTED: Jan 17 2021 22:23:26 +0000 COMPLETED: Jan 18 2021 22:01:12 +0000 ...
0
votes
2answers
95 views

Does malware that comes through outdated apps go away if I uninstall the apps?

I was reading this and this article. The first article itself is about why software updates are extremely important for security, and the second one also mentions the following: "Make sure your ...
0
votes
0answers
35 views

Wordpress reauth attacks? How to prevent

I am running a forward proxy filtering outbound requests for the following in order to catch potentially malicious requests from hacked Wordpress sites: /wp-login.php* /xmlrpc.php* Lately this has ...

1
2 3 4 5
45